Add OAuth2 backend

The backend is customized to support the following features:

- Email can be used as a user identifier in the OAuth2 username field.
- Trusted clients do not require the user consent and redirect automatically.
Good call on devstack, I'll make the change.

Yeah, we will follow up with devops when deploying.